Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: conhost.exe infected. (backdoored)

14 Aug 2010   #1

Windows 7
conhost.exe infected. (backdoored)

Hi all..

Well,i dont know if this is normal but why is there always two conhost.exe
And i mean its always running..

So i logon to my computer check task mananger and there are two conhost.exe running.

So i then check WinPatrol and i go to active tasks and its running there also..But it should not be..Because it should only be like your webbrowser and stuff?..

So i killed the process and deleted the conhost.exe but then the cmd would not work so i put it back in fresh again from my windows 7 disc..But still the same problem..

I have runned full scans with
KAS IS 2011
Malwarebytes' Anti-Malware

May someone please please help?

Thank You.

My System SpecsSystem Spec
14 Aug 2010   #2

Windows 7 Professional SP1 64-bit

I have two as well. Seems perfectly normal to me.
My System SpecsSystem Spec
14 Aug 2010   #3

Windows 10 Pro (x64)

conhost.exe is part of the Command Prompt.
My System SpecsSystem Spec


 conhost.exe infected. (backdoored)

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar help and support threads
Thread Forum
Conhost.exe error in program
when conhost.exe running in my pc the cpu processing increases rapidly & temp 60 degree above, normal is 39-45 in task manager what's the solution? please .......
General Discussion
What is the possibility of Windows installation CD being backdoored?
I recently read somewhere that pirated Windows CD are backdoored and viruses are installed with windows installation. Is it true? Is it possible for an attacker to do something like that? I think the possibility of this is less but it maybe possible. Also please point me to any security...
General Discussion
Why CONHOST.EXE process starts ONLY when I use TOR?
Hi guys, I have read in other threads the function of CONHOST.EXE process in Windows 7 (the legit process located in SYSTEM32 folder). But I wonder why in my pc this process appears only when I use the Tor Browser, and not when I use the stardard Firefox browser or in any other situation. ...
General Discussion
Conhost exe
I have 26 instances of conhost.exe running at the moment. It's slowing the laptop down. Yesterday there were close to 300 and when it first happened a few days ago there were 240. The only thing I can do is to restart the laptop which clears them for a while. I have AVG with firewall and...
General Discussion
W32.Sober in conhost.exe?
SpyBot discovered W32.Sober in file Windows\System32\conhost.exe (build 6956). Can somebody confirm it? Or it's fake alert?
System Security
I keep on getting this message all the time and the only way I can get rid of it is to disable my virus protection any one know how I can solve this
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:18.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App